How to configure ASP.NET delegation from impersonation
Background:
I've inherited a working site that walks the file server for directory listings and presents the finding on a webpage, all is good. However with the DR migration, and subsequent virtualization, they are moving the IIS Server away from the file server and
it has broken the logic.
The old server is 2k3 and the new webserver and fileserver are both 2k8r2. I am using windows 7 pro.
Observations:
From the event viewer -> security, on the old working system I can see a single validated client authenticating, albeit, on the same server as the filesystem. (win2K3)
However on the new system I can see that the process that is connecting to the fileserver is SYSTEM, if I hard wire another account in the identity impersonate area of web.config, I can see that user authenticate as it should on the fileserver.
I have attempted every authentication combination on the IIS7 server to get it to pass the credentials through, but to no avail. (Win2K8R2)
I then read about delegation and I thought it would be my saviour, but alas, no joy their either.
I have followed 'How to configure an ASP.NET application for a delegation scenario' but still cant make sence of it.
http://support.microsoft.com/kb/810572
The website is utilizing calls: System.IO.Directory.Exists
which dont appear to have any authentication options, so I expected that it would use the impersonated user..
If I hardwire a user in the web.config, it works, but defeats the function of being personalized.
I currently have ASP.NET impersonation enabled along with Windows Authentication and tried all providers in various orders. I got excited when it suggested I use Kernel-mode authentication, but it did not help, it gave me a 401:
401 - Unauthorized: Access is denied due to invalid credentials. You do not have permission to view this directory or page using the
credentials that you supplied.
I've been iisreset ing all day, any help would be appreciated.
Thanks
Greg
May 1st, 2012 3:23am
hi,
You might want to ask this question in asp.net forums. This forum focuses on Windows Server General queries/issues.
http://forums.asp.net/69.aspx/1?Component+DiscussionsA UNIVERSE without WINDOWS is CHAOS !
This posting is provided "AS IS" with no warranties or guarantees and confers no rights.
About Me ?
Free Windows Admin Tool Kit Click here and download it now
May 1st, 2012 3:37am
In addition to Santosh I would also recommend you to post the issue in the IIS forums as you are using Asp.net with IIS.
http://forums.iis.net/
http://www.arabitpro.com
May 1st, 2012 5:43am
Thanks Gents,
I have posted on both sites, but no reply as yet..Greg
Free Windows Admin Tool Kit Click here and download it now
May 3rd, 2012 12:28am


